/ 
Mojolicious-2.78
River stage four • 1088 direct dependents • 1233 total dependents
⭐ Starred 2674 GitHub stars
Security Advisories (10)
CPANSA-Mojolicious-2022-03 (2022-12-10)

Mojo::DOM did not correctly parse <script> tags.

CPANSA-Mojolicious-2021-02 (2021-06-01)

Small sessions could be used as part of a brute-force attack to decode the session secret.

CVE-2021-47208 (2021-03-16)

A bug in format detection can potentially be exploited for a DoS attack.

CVE-2018-25100 (2018-02-13)

Mojo::UserAgent::CookieJar leaks old cookies because of the missing host_only flag on empty domain.

CPANSA-Mojolicious-2015-01 (2015-02-02)

Directory traversal on Windows

CPANSA-Mojolicious-2018-03 (2018-05-19)

Mojo::UserAgent was not checking peer SSL certificates by default.

CVE-2020-36829 (2020-11-10)

Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.

CPANSA-Mojolicious-2018-02 (2018-05-11)

GET requests with embedded backslashes can be used to access local files on Windows hosts

CPANSA-Mojolicious-2014-01 (2014-10-07)

Context sensitivity of method param could lead to parameter injection attacks.

CVE-2024-58134 (2025-05-03)

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user's session.

Changes for version 2.78 - 2012-04-09

  • Improved Mojolicious::Routes to allow redispatching controllers.
  • Improved Mojolicious::Routes logging.
  • Improved documentation.

Documentation

README
Mojolicious::Guides
Mojolicious guide to the galaxy
Mojolicious::Guides::CodingGuidelines
Coding guidelines
Mojolicious::Guides::Cookbook
Cookbook
Mojolicious::Guides::FAQ
Frequently Asked Questions
Mojolicious::Guides::Growing
Growing
Mojolicious::Guides::Rendering
Rendering
Mojolicious::Guides::Routing
Routing
hypnotoad
Hypnotoad HTTP 1.1 and WebSocket server
mojo
The Mojolicious command system
morbo
Morbo HTTP 1.1 and WebSocket development server

Modules

Mojo
Duct tape for the HTML5 web!
Mojo::Asset
HTTP 1.1 content storage base class
Mojo::Asset::File
File storage for HTTP 1.1 content
Mojo::Asset::Memory
In-memory storage for HTTP 1.1 content
Mojo::Base
Minimal base class for Mojo projects
Mojo::ByteStream
ByteStream
Mojo::Cache
Naive in-memory cache
Mojo::Collection
Collection
Mojo::Command
Command base class
Mojo::Content
HTTP 1.1 content base class
Mojo::Content::MultiPart
HTTP 1.1 multipart content container
Mojo::Content::Single
HTTP 1.1 content container
Mojo::Cookie
HTTP 1.1 cookie base class
Mojo::Cookie::Request
HTTP 1.1 request cookie container
Mojo::Cookie::Response
HTTP 1.1 response cookie container
Mojo::CookieJar
Cookie jar for HTTP 1.1 user agents
Mojo::DOM
Minimalistic HTML5/XML DOM parser with CSS3 selectors
Mojo::DOM::CSS
CSS3 selector engine
Mojo::DOM::HTML
HTML5/XML engine
Mojo::Date
HTTP 1.1 date container
Mojo::EventEmitter
Event emitter base class
Mojo::Exception
Exceptions with context
Mojo::Headers
Headers
Mojo::HelloWorld
Hello World!
Mojo::Home
Detect and access the project root directory in Mojo
Mojo::IOLoop
Minimalistic reactor for non-blocking TCP clients and servers
Mojo::IOLoop::Client
Non-blocking TCP client
Mojo::IOLoop::Delay
Synchronize events
Mojo::IOLoop::Server
Non-blocking TCP server
Mojo::IOLoop::Stream
Non-blocking I/O stream
Mojo::JSON
Minimalistic JSON
Mojo::JSON::Pointer
JSON Pointers
Mojo::Loader
Loader
Mojo::Log
Simple logger
Mojo::Message
HTTP 1.1 message base class
Mojo::Message::Request
HTTP 1.1 request container
Mojo::Message::Response
HTTP 1.1 response container
Mojo::Parameters
Parameter container
Mojo::Path
Path
Mojo::Reactor
Low level event reactor base class
Mojo::Reactor::EV
Low level event reactor with libev support
Mojo::Reactor::Poll
Low level event reactor with poll support
Mojo::Server
HTTP server base class
Mojo::Server::CGI
CGI server
Mojo::Server::Daemon
Non-blocking I/O HTTP 1.1 and WebSocket server
Mojo::Server::Hypnotoad
ALL GLORY TO THE HYPNOTOAD!
Mojo::Server::Morbo
DOOOOOOOOOOOOOOOOOOM!
Mojo::Server::PSGI
PSGI server
Mojo::Template
Perl-ish templates!
Mojo::Transaction
Transaction base class
Mojo::Transaction::HTTP
HTTP 1.1 transaction container
Mojo::Transaction::WebSocket
WebSocket transaction container
Mojo::URL
Uniform Resource Locator
Mojo::Upload
Upload container
Mojo::UserAgent
Non-blocking I/O HTTP 1.1 and WebSocket user agent
Mojo::UserAgent::Transactor
User agent transactor
Mojo::Util
Portable utility functions
Mojolicious
Real-time web framework
Mojolicious::Command::cgi
CGI command
Mojolicious::Command::cpanify
Cpanify command
Mojolicious::Command::daemon
Daemon command
Mojolicious::Command::eval
Eval command
Mojolicious::Command::generate
Generator command
Mojolicious::Command::generate::app
App generator command
Mojolicious::Command::generate::lite_app
Lite app generator command
Mojolicious::Command::generate::makefile
Makefile generator command
Mojolicious::Command::generate::plugin
Plugin generator command
Mojolicious::Command::get
Get command
Mojolicious::Command::inflate
Inflate command
Mojolicious::Command::psgi
PSGI command
Mojolicious::Command::routes
Routes command
Mojolicious::Command::test
Test command
Mojolicious::Command::version
Version command
Mojolicious::Commands
Commands
Mojolicious::Controller
Controller base class
Mojolicious::Lite
Real-time micro web framework
Mojolicious::Plugin
Plugin base class
Mojolicious::Plugin::Charset
Charset plugin
Mojolicious::Plugin::Config
Perl-ish configuration plugin
Mojolicious::Plugin::DefaultHelpers
Default helpers plugin
Mojolicious::Plugin::EPLRenderer
Embedded Perl Lite renderer plugin
Mojolicious::Plugin::EPRenderer
Embedded Perl renderer plugin
Mojolicious::Plugin::HeaderCondition
Header condition plugin
Mojolicious::Plugin::I18N
Internationalization plugin
Mojolicious::Plugin::JSONConfig
JSON configuration plugin
Mojolicious::Plugin::Mount
Application mount plugin
Mojolicious::Plugin::PODRenderer
POD renderer plugin
Mojolicious::Plugin::PoweredBy
Powered by plugin
Mojolicious::Plugin::RequestTimer
Request timer plugin
Mojolicious::Plugin::TagHelpers
Tag helpers plugin
Mojolicious::Plugins
Plugins
Mojolicious::Renderer
MIME type based renderer
Mojolicious::Routes
Always find your destination with routes
Mojolicious::Routes::Match
Routes visitor
Mojolicious::Routes::Pattern
Routes pattern engine
Mojolicious::Routes::Route
Route container
Mojolicious::Sessions
Signed cookie based sessions
Mojolicious::Static
Serve static files
Mojolicious::Types
MIME types
Test::Mojo
Testing Mojo!
ojo
Fun Oneliners with Mojo!

Provides

Mojo::JSON::_Bool
in lib/Mojo/JSON.pm
Mojo::Server::PSGI::_IO
in lib/Mojo/Server/PSGI.pm
Mojolicious::Plugin::I18N::_Handler
in lib/Mojolicious/Plugin/I18N.pm

Examples

Other files